Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 05 FEBRUARY 2013

Protection Of Personal Information Bill 2009 (22 January 2013)

Webber Wentzel
Webber Wentzel
Contributor
Webber Wentzel

Webber Wentzel

Founded in 1868, Webber Wentzel is a leading full-service law firm that provides clients with...

View firm profile
Explore more from Webber Wentzel

A discussion on the Protection of Personal Information Bill 2009, which aims to bring South Africa in line with international data protection laws.

South AfricaPrivacy
Dario Milo
Dario Milo
Greg Palmer
Greg Palmer

The Protection of Personal Information Bill 2009 (POPI or the Bill*) aims to bring South Africa in line with international data protection laws. The impact of this legislation will be far-reaching and will significantly affect the way companies collect, store and disseminate personal information. Members of our Information Law and Data Protection Group provide some insight into the implications of POPI in this series of Snapshots.

Previous Snapshots have highlighted that the Bill sets out eight conditions that responsible parties will need to consider for the processing of personal information to be lawful. In this Snapshot Security Safeguards and Data Subject Participation, being the seventh and eighth conditions, are considered.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

AI-assisted Cyberattacks: When Does POPIA Require Notification?

As artificial intelligence accelerates the speed, scale and sophistication of cyberattacks in South Africa, organisations face critical questions about their legal obligations under POPIA. This analysis examines whether existing cybersecurity programmes remain legally adequate when threats evolve, and clarifies the precise circumstances under which AI-assisted security compromises must be reported to regulators and affected individuals.
South AfricaPrivacy
ENS
ENS
Article

ID Like To Know: Unique Identifiers Under POPIA

When organisations assign unique identifiers like account numbers or reference codes to individuals, do these identifiers fall outside data protection laws? A recent South African court case challenges conventional assumptions about what constitutes personal information under POPIA, raising critical questions about pseudonymisation, identifiability standards, and compliance obligations that every organisation processing such data must understand.
South AfricaPrivacy
ENS
ENS
Article

Checkout, But Make It AI: Legal Considerations For Shopping Agents

As artificial intelligence shopping agents evolve from simple search tools to autonomous purchasing assistants, South African businesses face critical questions about data collection, consumer protection, and legal responsibility that existing frameworks like POPIA were never designed to address. How should organisations navigate AI disclosure requirements, handle voluntarily shared sensitive information, and establish governance protocols when their chatbots can independently compare products, personalise
South AfricaPrivacy
ENS
ENS